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client calls server to open file 



server returns file descriptor lyy^^'^ 
server creates file entry 



client calls server to perfornn an operation on the file 
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server checks security status in file entry 
client allowed to perform the operation 
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client calls sen/er to close the file 



IS 



server checks delete-on-close status in file entry 
server closes file without deleting it from NVRAM 
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client calls server to open file R ^ 



2-^ 



/ server returns file descriptor 
/ server creates file entry 




client passes authorization credential to server 



server passes authorization credential and file identity to independent verification routine 

r. 



independent verification routine validates client authorization 
returns positive to server 



^server change s active file security status in file entry 



fclient calls server to perform operation on the file t 



server checks security status in file entry 
client allowed to perform operation on the file 



% 




server checks delete-on-close status in file entry 
server closes file without deleting it from NVRAM 
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1^ client calls server to open file ^ ^ ' 



server returns file descriptor 1^ 
server creates file entry ^""^ 



client passes authorization credential to server 



server passes authorization credential and file identity to independent verification routine 



independent verification routine validates client authorization 
returns positive to server 
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1 ^ server changes security status in file entry^^ ^ { 



client calls server to delete the file 



server checks security status in file entry 
server changes delete-on-close status 
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client calls server to close the file 



server checks deletes-on-close status in file entry | 
server closes file and deletes it from NVRAM 
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client calls server to open new file for write 
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server returns file descriptor 
server creates file entry 
server recognizes file as new 
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client passes authorization credential to s erve r/^ "7 



/ server passes authorization credential and file identity to independent verification routine 

_ _ _ J- 



independent verification routine validates client authorization 
jreturns positive to server 



server creates file and sets fixed security status to secure 
server closes open file entry 
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